Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7EAhjlT2ss3-764PfExiFoqh3A.cer
File: c7EAhjlT2ss3-764PfExiFoqh3A.cer (raw, json)
Hash identifier: /2MF3by17UK/axRlEb06UjNo1vMSpL/6v8Q+eCpNF5Y=
Subject key identifier: 73:B1:00:86:39:53:DA:CB:37:FB:BE:B8:3D:F1:31:88:5A:2A:87:70
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02DC16
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E03C0/503B5EC2C10811F19EC2E4503A11F970/c7EAhjlT2ss3-764PfExiFoqh3A.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E03C0/503B5EC2C10811F19EC2E4503A11F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 05 Oct 2026 22:01:33 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 149164
IP: 45.249.62.0/24
IP: 203.28.150.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Nov 2026 10:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187414 (0x2dc16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 5 22:01:33 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A91E03C0, serialNumber=73B100863953DACB37FBBEB83DF131885A2A8770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e7:83:20:8a:cc:d4:c3:cd:0a:38:ea:83:8c:
fd:d8:ae:fa:9e:34:ca:6e:af:33:0b:d8:e5:d4:b8:
fc:a8:7a:09:aa:35:a9:8a:7b:88:7e:d3:76:3c:58:
da:89:24:c5:fc:67:05:80:f4:44:79:35:64:7a:bf:
f3:6e:ae:57:3a:94:6b:ce:ff:ac:a6:1e:01:7e:3c:
87:75:ff:30:0e:48:65:81:23:a6:5c:ab:43:ae:2e:
7e:95:98:df:6e:d9:ef:60:a5:b8:97:b9:65:8d:b2:
a8:c3:bf:27:4a:72:c4:93:7f:c5:31:05:73:4b:d2:
43:fe:7f:ea:5c:42:83:aa:07:c7:52:e2:ac:4e:47:
be:99:11:9d:54:4e:c2:09:95:1a:6c:aa:b0:1a:70:
74:d7:0e:7b:c2:a5:fc:8b:05:f8:dd:82:fb:cf:73:
a2:72:e3:49:a9:d7:40:1b:6b:3f:13:82:9f:10:53:
5f:80:43:95:84:43:89:cd:60:e2:62:84:2f:c5:c5:
59:c0:7f:86:86:49:f2:22:5d:89:98:b7:47:e2:a6:
af:ce:6e:b2:08:9f:05:f3:eb:81:64:51:3f:1e:9f:
4b:4c:94:51:86:c3:b0:55:27:98:0f:96:a8:db:3c:
b0:bd:5f:16:5e:cc:77:a5:eb:2b:f5:23:69:38:95:
66:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B1:00:86:39:53:DA:CB:37:FB:BE:B8:3D:F1:31:88:5A:2A:87:70
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E03C0/503B5EC2C10811F19EC2E4503A11F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E03C0/503B5EC2C10811F19EC2E4503A11F970/c7EAhjlT2ss3-764PfExiFoqh3A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
149164
sbgp-ipAddrBlock: critical
IPv4:
45.249.62.0/24
203.28.150.0/24
Signature Algorithm: sha256WithRSAEncryption
04:aa:68:b6:65:69:b1:50:e7:de:0b:6b:30:bd:e6:c1:c7:2d:
01:09:78:fc:b6:8b:73:7e:08:e1:26:6b:b4:df:f8:77:ea:bc:
36:4b:a9:f2:ac:4f:1d:db:87:0e:2d:01:a3:96:06:70:7e:16:
5f:e5:b7:2a:6f:a3:25:93:6b:48:7c:9a:f8:91:ea:c8:7f:04:
94:a0:15:7a:d5:14:53:93:12:ac:4e:16:de:fc:41:cf:b5:45:
dc:77:e4:94:da:e2:90:a3:3e:4c:21:6e:c6:21:c7:2d:2f:d6:
65:7b:80:84:18:6a:7c:7d:73:b9:2f:69:a6:41:27:8c:82:39:
b4:92:c0:ee:2b:e0:1d:f7:8c:ef:69:64:5b:5b:51:a0:fc:1a:
d9:46:f7:23:ad:13:64:49:c3:35:74:5b:86:bc:84:8a:58:5d:
52:05:72:f3:09:48:15:0a:e3:08:16:4e:3b:44:ca:45:c8:74:
af:44:9f:4f:12:06:ad:2d:26:ce:39:9f:78:02:c6:48:8f:8f:
f8:ab:6f:ab:51:bd:61:47:df:a3:fc:3b:a9:b8:56:3a:79:37:
b5:1b:ac:c7:3f:a7:6d:ff:4e:68:82:01:8a:60:6a:4d:ce:38:
cb:79:d0:2c:3d:69:ad:63:5b:7f:1f:89:48:48:94:2e:6c:67:
2f:c0:89:08
-----BEGIN CERTIFICATE-----
MIIGIDCCBQigAwIBAgIDAtwWMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MTAwNTIyMDEzM1oXDTI3MDMzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRTAzQzAxMTAvBgNVBAUTKDczQjEwMDg2Mzk1M0RBQ0IzN0ZCQkVC
ODNERjEzMTg4NUEyQTg3NzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCQ54MgiszUw80KOOqDjP3YrvqeNMpurzML2OXUuPyoegmqNamKe4h+03Y8WNqJ
JMX8ZwWA9ER5NWR6v/Nurlc6lGvO/6ymHgF+PId1/zAOSGWBI6Zcq0OuLn6VmN9u
2e9gpbiXuWWNsqjDvydKcsSTf8UxBXNL0kP+f+pcQoOqB8dS4qxOR76ZEZ1UTsIJ
lRpsqrAacHTXDnvCpfyLBfjdgvvPc6Jy40mp10Abaz8Tgp8QU1+AQ5WEQ4nNYOJi
hC/FxVnAf4aGSfIiXYmYt0fipq/ObrIInwXz64FkUT8en0tMlFGGw7BVJ5gPlqjb
PLC9XxZezHel6yv1I2k4lWZnAgMBAAGjggMVMIIDETAdBgNVHQ4EFgQUc7EAhjlT
2ss3+764PfExiFoqh3AwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUUwM0MwLzUwM0I1RUMyQzEwODExRjE5RUMyRTQ1MDNBMTFGOTcwLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFFMDNDMC81MDNCNUVDMkMxMDgxMUYxOUVDMkU0NTAzQTExRjk3MC9jN0VBaGps
VDJzczMtNzY0UGZFeGlGb3FoM0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAkasMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALfk+AwQAyxyW
MA0GCSqGSIb3DQEBCwUAA4IBAQAEqmi2ZWmxUOfeC2swvebBxy0BCXj8totzfgjh
Jmu03/h36rw2S6nyrE8d24cOLQGjlgZwfhZf5bcqb6Mlk2tIfJr4kerIfwSUoBV6
1RRTkxKsThbe/EHPtUXcd+SU2uKQoz5MIW7GIcctL9Zle4CEGGp8fXO5L2mmQSeM
gjm0ksDuK+Ad94zvaWRbW1Gg/BrZRvcjrRNkScM1dFuGvISKWF1SBXLzCUgVCuMI
Fk47RMpFyHSvRJ9PEgatLSbOOZ94AsZIj4/4q2+rUb1hR9+j/DupuFY6eTe1G6zH
P6dt/05oggGKYGpNzjjLedAsPWmtY1t/H4lISJQubGcvwIkI
-----END CERTIFICATE-----
Generated at Thu Nov 5 14:33:11 2026 by rpki-client